CVE-2022-2923: NULL Pointer Dereference in vim/vim
Last updated 24 July 2024
Other sources
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.1378-2+deb12u2Fixed in 2:9.1.1230-2Fixed in 2:9.1.1230-2+deb13u1Fixed in 2:9.2.0858-1 - Upgrade
Upgrade
alpine/vimto a version that resolves this vulnerability.Fixed in 9.0.0270-r0 - Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:9.0.0242-1 - Upgrade
Upgrade
vim/vimto a version that resolves this vulnerability.Fixed in 9.0.0240
Event History
Frequently Asked Questions
What is CVE-2022-2923?
CVE-2022-2923 is a vulnerability that refers to a NULL Pointer Dereference in the GitHub repository vim/vim prior to version 9.0.0240.
Which software versions are affected by CVE-2022-2923?
The affected software versions include 2:9.0.0242-1, 2:8.0.1453-1ubuntu1.12, 2:8.1.2269-1ubuntu5.13, 2:8.2.3995-1ubuntu2.5, 2:9.0.0242-1ubuntu1.2, 2:9.0.1378-2, and 2:9.0.1894-1.
How severe is CVE-2022-2923?
CVE-2022-2923 has a severity score of 7.5, which is considered high.
What is the CWE category of CVE-2022-2923?
CVE-2022-2923 falls under the CWE category 476, which is NULL Pointer Dereference.
How can I fix CVE-2022-2923?
To fix CVE-2022-2923, you should update the vim/vim repository to version 9.0.0240 or later.